Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly=false, openWorld=true, idempotent=false), the description discloses runtime (~5 minutes), the billing consequence and the failure exception ('not charged if the run needs more input or fails'), and that it returns a job_id immediately. These are exactly the operational facts an agent needs before spending a paid run.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.